Configure zot

2024-09-13 05:23:44 +02:00 · 2024-09-13 05:23:44 +02:00 · dd0639abb5
commit dd0639abb5
parent eea7d7a4f4
5 changed files with 76 additions and 60 deletions
--- a/installations/platform/helmfile.yaml
+++ b/installations/platform/helmfile.yaml
@ -45,7 +45,7 @@ releases:
    chart: zot/zot
    version: 0.1.61
    createNamespace: false
-    installed: false
+    installed: true
    namespace: platform
    condition: workload.enabled
    inherit:
--- a/values/badhouseplants/secrets.minio.yaml
+++ b/values/badhouseplants/secrets.minio.yaml
@ -1,35 +1,38 @@
-rootPassword: ENC[AES256_GCM,data:590lWmGK19hcFCuTIXgV5aXyJH0=,iv:T3KHE21UnDNiePZskMyf0FKiPlHEr9tO/QoRO9W3M/A=,tag:HvZFdLADzd99POGZeUx4zg==,type:str]
+rootPassword: ENC[AES256_GCM,data:Ctq0cxVoFdZPZd7sJrGmFjS5jDc=,iv:TMPe4r0BxFIz1SacgGbuGH/Wc27w7fFL/2cJ1lpbGG8=,tag:GMoxMQWQHBjUzMnByR+bhw==,type:str]
 users:
-    - accessKey: ENC[AES256_GCM,data:C8j0BB47C+U=,iv:9YwkZO6QtJXJ2vo6HF13BOJ3kjueEFGt+L/yHTLykKo=,tag:u4Ec+XC/JMjAkAVMNaiuCQ==,type:str]
-      secretKey: ENC[AES256_GCM,data:Tf5vlbvmZT1XPKbAOPW8IcuXqA==,iv:GTKyoyCCqcZkF6VFeutMQwdtL1EbkMHTs50LDTc/Yyc=,tag:3jxedHmuH/RdYzLIDag1OA==,type:str]
-      policy: ENC[AES256_GCM,data:7R9brCdGZWI=,iv:JPgs+Pe8yluwG4YcY2Zo4yFL0DCIdCVrosRgDODIUao=,tag:NnBPmPzYSjh8ClEnMc711A==,type:str]
+  - accessKey: ENC[AES256_GCM,data:oBCUrV/01Tg=,iv:v37Epm1wkOipwoj4kjwymQRH6vgH8Gtg8Zhb9WWIZB8=,tag:MLGzuECS3RQ+/2X7f5Q/xQ==,type:str]
+    secretKey: ENC[AES256_GCM,data:GVKFQySULmuGpBLWbY8q7VcygQ==,iv:Rvqvk5z9UiKdK8F5kQXKKXOWVei9sdFTDNvVWIqW0tY=,tag:cFYWor0Lhq5LAXz1wBZg0Q==,type:str]
+    policy: ENC[AES256_GCM,data:yXcQcUu2NHc=,iv:+B7sWXMnJtDDLXwn01jwWN1vmahGfRP5l9PCahwdUjw=,tag:LeL/kOZjRCERIRCJ3F5/0A==,type:str]
+  - accessKey: ENC[AES256_GCM,data:zmN8,iv:OTIBikywIIhhaTFUTUYLTUbVovp4VCa3XMresJ8id3A=,tag:HdgLf/0V6ZGmWXH4ybtS2g==,type:str]
+    secretKey: ENC[AES256_GCM,data:aObcvWk+FYWFlgxpPvXJWpKfb7VYfO9DOA==,iv:4J6mHoY94Lw5qcK6+JpSo+QVrLKeBCapO7xHznvV2SU=,tag:J808rKrdkjDQ+KOypda7nw==,type:str]
+    policy: ENC[AES256_GCM,data:7kOF,iv:NfwTGWwkPAYtVSBfE9N6mjxkZeP6thuhJBd9wvfGUX0=,tag:pGOL2n7vpRIwW0B/wjIq6A==,type:str]
 oidc:
-    enabled: ENC[AES256_GCM,data:v7bnBw==,iv:JJCvuhtrSYrjznP5iktZ3IQ2fNGy5heuiFPrTiEXRjc=,tag:K3dZHT0WtM8eQXPnD4mcHQ==,type:bool]
-    configUrl: ENC[AES256_GCM,data:8Q3qOVbAwKhDjoGGcmALPpIaJSpP3JHTRD2WooZdVbr74j21zVOJLAfiWIEtYfKa2sjPAVsmEIA2Pi7bddPrHHm9Tbiai3x7GgjWezSnJMYRko64rHaWcks=,iv:WrI3sy5KkOjHaJn4kHVRtqkTMoJ27eni0a7njN9LkdE=,tag:Kb/AneWQ6ilkKQsKneWUmg==,type:str]
-    clientId: ENC[AES256_GCM,data:qmSdmlY=,iv:m8I/9JJ+GUdHC+oLqQm8Bd03V0HDpotfCWMVFQUZkIg=,tag:4CI7n9zl+fuddvvCFy0WBg==,type:str]
-    clientSecret: ENC[AES256_GCM,data:p861qML6DA7dmJMct6HUTjp24lB55nK2XP4bz1XJRoA9jJ6pHK51ZO3AZTu6uPJzGbEPOlS9IseHXfFhrm+/qsOX8kBKd+KNxgpEei5DX9VrWPYXUVEUnAWChePhcLaNQmOGbDaYQL02jvhtxWyhU2y9acQK82XUJvZ4fphJXkY=,iv:m99GKBMRa9/NZ3CnNEhK6OETNkwvEWk5pgsMq0D1JHU=,tag:bXyUCw37TO+2TbfI2OCDlw==,type:str]
-    claimName: ENC[AES256_GCM,data:TTcLpDYT,iv:UB4CnJzBAhZoQebnw+lwnyU/VblUp9ZIJAvBm5tcFlQ=,tag:rpA9bUmAwrkjNwWmm/fKSw==,type:str]
-    redirectUri: ENC[AES256_GCM,data:Z0mo2BbMWBp/kfBaplkQzzFdktjTvLTB3c50yMU2IfqQVta5Q2vQ9UJeIB16JX0=,iv:avVDsu8I3es4SMMocVk+HZfTHC7hovmBsKREn+nl4ZI=,tag:Pr3s4NJyaI7ptm0hET4pfA==,type:str]
-    comment: ENC[AES256_GCM,data:gfJ47KgduHgkAo/Xybg0YSNOqXg=,iv:pihROTdckwv9cehzIyYyhjwpgMurBMx57NbpqMDKu7k=,tag:Bf7saFGs/Iq71x739Q+zDQ==,type:str]
-    claimPrefix: ""
-    scopes: ENC[AES256_GCM,data:Rql6kXzWAIkE5xcb6dwbNd2sa+mCGD2uuXkT,iv:9xccj1iHtkcpY2GbNoVdggrvX3sDO88M2dsoIVIhSPU=,tag:P/2ITVvGJhmwhmhPtT6Itg==,type:str]
+  enabled: ENC[AES256_GCM,data:pMUKTg==,iv:48MrCefuYkJr0o8VVMp/DZs1RLFl1o4wrlhK8qi8UyQ=,tag:7pwyOG+KioYFFJIwxa2POA==,type:bool]
+  configUrl: ENC[AES256_GCM,data:TpnTA8Elnk4qtG/I4Z+l4ZlBa/nGxYmv2MCO5nel7t9sTntDEdnjn23j6S9Si4Ro1MMtXsUqVNYkZ+DwIeBfsmPTCtGd9dq6naOTmSg95bXZRr2JmNSMc+A=,iv:KNmyCczBqbjvBpYiZ4NUNtDGTS1JYcQnuFLHVwXtba8=,tag:U4POHOx1GqTGGmh5IRr4YQ==,type:str]
+  clientId: ENC[AES256_GCM,data:PXPOadk=,iv:mWhj8fBjESJsHlPQngAlNgEafbMYXUMUX2uhfoVg9x4=,tag:WIipgnC48IsRPJduRxaekw==,type:str]
+  clientSecret: ENC[AES256_GCM,data:Ggt0mk4DRDGaCSdKyXKRDwyNCDcGURR6fXKPeeZc1xN2SvlF2p5EuX8Ff1d2nxDneM2LcZUyIw+HeCLlMGXsBTddhp6PZNSmiVEfBmBB/mHA9DORy2yNess8YsmIkkxWTjqXGrxN4hcVCLXpjHs7BPAkIfy7bxN8p2GR5aGMBSQ=,iv:FzwvxXFzrO8l8bT1h0XuHKW8Vh6jUsvh2nqXa9tyamQ=,tag:lLNdw6pnvzl916kVzqUhtA==,type:str]
+  claimName: ENC[AES256_GCM,data:10Fo+/Ic,iv:TeZUMkhW3+6m20SO2fb7bE9Un2wMcGo0zdLsKSgku8s=,tag:5V898yy4wgev9Z0+cA5JHA==,type:str]
+  redirectUri: ENC[AES256_GCM,data:bAZUX1ORaVCtdM2R8QHJCw1EBQd9qSz1Bnca+QoWZ6I67ORAAgNw0EzvWFc9UjQ=,iv:d4iYyl6pNRXBIcM9Vj1amG01iaj/rBz13n7KoZU+q+4=,tag:cymdAS/S3YsMO2sWNLu60A==,type:str]
+  comment: ENC[AES256_GCM,data:n6jK75om4fojBc1wFPBABXNymus=,iv:zcm2l1oJbAHNRCI+WCpyfZVGfxK9Qd4WSDcWKSkQzgo=,tag:zNl+VuPkoaYY8p+tmnYTPg==,type:str]
+  claimPrefix: ""
+  scopes: ENC[AES256_GCM,data:eze1hNDNN2krEKrANULY+98hemswJAMLJfMf,iv:GAL0OHV0sOUWo/ruSMXVN1XbdOLN9VRK/CfzNH3EXMA=,tag:saYqSjLXY2SRwNr3r3Vd0g==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmbE5TNzEwY2l3VE5EcHU0
-            cnNBazdHM0ZUd1ZJV0NMcDhPZUdrZVhuL1dNCkRHUzB5T1N3NFpUZ1JQalg0elA0
-            K1J6SE9ML2svT2ovYjY3dnJnY20wMEEKLS0tIDZ1MldTanduV3FjaWNsSFdhdGRB
-            b2dkWUVReEtJSXFRSTVLVFJzVmU5Ym8KrIBGe2RNCHGBNDk9TIPTFL8ge1WukG/D
-            nzE+Gh0PiJrxJDzE/sWFtYgkzthMRBhDNjieZUmbgtpDULDe/9Q9ow==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-19T11:07:01Z"
-    mac: ENC[AES256_GCM,data:IU9IoU1gpwwnrEVLeMAC4B33lZcpCmoOectiavKBOuSnS5agEi5eR2V7TScO8MYpfOuLfM5dypAmL7I8CIcR0VESizUd4dbc34RUZ4VstjI6qiS43tbGgHxq1hAKaUbDCh1j743uK+bAe3NSG5LJfy1mfGIWEaOWRcu8elaJisk=,iv:6bDw+lViJEJjHd6P4s7shz6Y6lO6rR8YZ/2mSaf785c=,tag:7sZi+/JrjZhX4erCpMqhtg==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.0
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxMnFEcjBXNVhPV282VWww
+        RTdnZkozaXVuRTUzSlR2SEtLY0lwV0crYWl3CkRWbDg5OWNGSjlVRzlhaitXVWs1
+        WURDaDF1NWs2Z2dYYU1rZkxrTk1jcEkKLS0tIHJXUG1tY3BkU2krMUdhUVFFd2s5
+        b1U2QVFUdFBxZUk4TEluR2dPeUVDN1kKFG6rNR+1LuLhWK0UItX4v3ydBEMvEUnB
+        TLIM73c6DGeCIhEgLi+4FhsoQHXdtLBL9TyQYwJVg7f8rH+gZPc3MA==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-09-12T13:24:21Z"
+  mac: ENC[AES256_GCM,data:bSX8W6VSkguR+yPaUIloJeGtC6DIyh+vRFl+ITNUITEaqeeOA6kXBCpVtWIsHM+HWbO7Ev56bxjuqUNmQFsqiy7LDiuGXvAhj0BehjstScb54jWE/fdNGj67bBXOPSheLeqgk9B6Rwv9ygcgBNzTQj4lbxgxlyEXHTWMCyssvg8=,iv:nIuikxuVl+M4fAMx8TdF+ECI8WQHUaUTNGNWqUZD4+Y=,tag:fvlMmVSm51fLbKUSqruO1Q==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.0
--- a/values/badhouseplants/secrets.zot.yaml
+++ b/values/badhouseplants/secrets.zot.yaml
@ -1,25 +1,25 @@
 configFiles:
-    config.json: ENC[AES256_GCM,data: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,iv:ckg25YFoRwiCblA1WcPC3RL9duKOgCzW4BrofqdWVxY=,tag:YfovWhDDYeMN8nzARjjANg==,type:str]
+  config.json: ENC[AES256_GCM,data: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,iv:1wnPIhoigntgZy/zQ2gCYhoWbKcG7Kfychnm7HzPWJk=,tag:3/X1J+IHyKWgUItJLJBduA==,type:str]
 secretFiles:
-    htpasswd: ENC[AES256_GCM,data:DjBPh4ycj3Cr8pmjlnkOPsLrA6joney4vfkZMQJzq3+Bo8ERECyV3Ttc193c3DAfJCd9/Vj2HGDHBhxyqR/mT85NT2LuMueFl6XgdrvWIm76sOts1hmfmstGBUT3o9UOk7B3JXgRyXe2hqA312lIrBswncsy1RQOJvUQyhEOcD/Li6R3CQFPFQ==,iv:C/F3vg9dcmS1uSlJkbOkOoj04ZvIVuHJ/IkIqGkYUgs=,tag:I/c8V9DF+xiuHYdnAyl3KQ==,type:str]
-authHeader: ENC[AES256_GCM,data:xiqhgK8yQUtpOBUMDVWD7JxAi5xjz4HDsV4wveMBoDEp60lrZugT+23i9m4cifdl,iv:73GsdwwZHkhZvbaGQhKoHykLvvVwYrIuZSKJMWOUd8Q=,tag:3g8H1IACoqmC7mndixb+7Q==,type:str]
+  htpasswd: ENC[AES256_GCM,data:D+6dHsMz58WNiBWoJyBFrHYBenh46LpAmUrNOdiAjtV18JaZsj15mCJtEJ7WDqiY3gepiE6ep09+BJtkHxbcNdBhtQ1TUGjqcYYd4Ci5oXs1/cCnvh7VeAwX20DcfiiTZb2jQziyERmOFNEIp8k3ZXRF0iioPkasj+JBkwveb4ETs7tCgHj3fA==,iv:FiWBUEimPzowyAaK/sG1jXvQXYwtUW3V1hzHy6jqQqM=,tag:S8PWr4+JVkmalQ+RW4L9gQ==,type:str]
+authHeader: ENC[AES256_GCM,data:BJPeQa3pGY0eyDV8j1JN+XAFvM3aVWPQlKMEe6tjJNOB0VMd6/THiuP5J9O0p9RB,iv:ezLSsmU9z2ck2i+86J00JmaxwEVgbzIVJernN9wGRmE=,tag:+o4D+iRLuK8z2iywirruJw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvc2NjZ0J3eWljdzlqSVM1
-            N2pqQ1pXVmJxTjZzMlFMdWgrYS9OVVFFWkVJCnpnaW44Vmo5VGUvSjFRWmFlQ0FX
-            aEpQajVJNzdQeXJ2bzFBQkkycjFYeVkKLS0tIFh5SGxEbW93ckc1WnJydzFWcVBR
-            RjZMZHEwbHR2bzZJZEFqeWRlZXlFTHcK4Z0WwYIIdBZRt2RTlSbRHER9BJNolHLV
-            0EUjwcEnFQExF/uh2FTeoVudBhmlyfVjYvlI56QoeculVHPSS4YIhw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-18T20:53:28Z"
-    mac: ENC[AES256_GCM,data:RTUkxdfFLcqSHUjNTTzGHYtZubydqm+9cZmW6gXj2PIn5I0GXQoJVwWT6sZFbARrDpaMyANLBYYeh2P40i9M1GKqz1HnnelvMDEqN036e/5dtSRclPhQokDxtRMZAqM2tGDG0E3UVzMo0I2hQL3BJiGSkdNjz+rRXlJCOnrtUyc=,iv:jUhrVQKT2YVn3K9sY13M8ymEHnQahs0gHe0IOEbdCw8=,tag:jEcelDJi8HQdLS7/fUHq/g==,type:str]
-    pgp: []
-    unencrypted_suffix: _unencrypted
-    version: 3.9.0
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+    - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBL3JQUXBXaGhLMDdzQlB4
+        SU4rSFgvZEEzTlhOR1c0eHRiVm5lWDk3OHd3CkcrNGdDVkZsMThNMVRNck42dFBN
+        MW5HR2gwK2MrSHdRdUs2czVZNHk4bDQKLS0tIGdZNVUwMnFUdkpGWEt2dTlpSVNr
+        amdiN29wUTRld2RTMThRcWI4UzY0R28KiJL2RrJC+HCZwHgLctUulggzInOKDTcP
+        TKvEBR1MIxL0lA4gA4QoBS4PQLhvE+VgbTg7m/QjbLOiWUJUiVz3ew==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-09-12T19:46:07Z"
+  mac: ENC[AES256_GCM,data:ov8gTJtpQzoTWhQV9XzWr1chJaHtX+kp2Cjt4ovSSc9UNCJHIiKQkUi1ljm4UcQ+a2ongPrjgPxXL3tsnLSIYndKIoeKZh4AEVwJhtrJ7+hR31frEgqOTfkGNWgoR0n6NUG+47fIGzud7AeEpefiqNMzo9/Lik37xYjDARY/nFU=,iv:c/585bw7phSceiW/ulXcs9wc43ZZP2ttSpkA4Gz8NeY=,tag:Wz4FWaKzVrrzfshSq+Z/jw==,type:str]
+  pgp: []
+  unencrypted_suffix: _unencrypted
+  version: 3.9.0
--- a/values/badhouseplants/values.minio.yaml
+++ b/values/badhouseplants/values.minio.yaml
@ -103,6 +103,10 @@ buckets:
    policy: download
    purge: false
    versioning: false
+  - name: zot
+    policy: none
+    purge: false
+    versioning: false
 metrics:
  serviceMonitor:
    enabled: false
@ -153,3 +157,10 @@ policies:
          - 'arn:aws:s3:::sharing/*'
        actions:
          - "s3:*"
+  - name: zot
+    statements:
+      - resources:
+          - 'arn:aws:s3:::zot'
+          - 'arn:aws:s3:::zot/*'
+        actions:
+          - 's3:*'
--- a/values/badhouseplants/values.zot.yaml
+++ b/values/badhouseplants/values.zot.yaml
@ -1,3 +1,5 @@
+image:
+  repository: ghcr.io/project-zot/zot
 ingress:
  enabled: true
  className: traefik
@ -17,12 +19,12 @@ ingress:
        - zot.badhouseplants.net
 service:
  type: ClusterIP
-persistence: true
+persistence: false
 pvc:
-  create: true
-  accessMode: "ReadWriteMany"
-  storage: 5Gi
-  storageClassName: ceph-filesystem
+  create: false
+  #  accessMode: "ReadWriteMany"
+  #  storage: 5Gi
+  #  storageClassName: ceph-filesystem
 mountConfig: true
 mountSecret: true
 strategy: